Known Vulnerabilities for Zimbra Collaboration Suite by Zimbra
Listed below are 3 of the newest known vulnerabilities associated with "Zimbra Collaboration Suite" by "Zimbra".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115786 json | A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another ... | Not Provided | 2026-10-23 | 2026-10-28 |
| CVE-2026-115785 json | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows a... | Not Provided | 2026-10-23 | 2026-10-24 |
| CVE-2026-93640 json | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Un... | Not Provided | 2026-10-23 | 2026-10-24 |
| CVE-2026-93639 json | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit a... | Not Provided | 2026-10-23 | 2026-10-28 |
| CVE-2026-93638 json | A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthenticate... | Not Provided | 2026-10-23 | 2026-10-28 |
| CVE-2026-93637 json | An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to ... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-93636 json | An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise un... | Not Provided | 2026-10-23 | 2026-10-28 |
| CVE-2026-93635 json | LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-93634 json | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged... | Not Provided | 2026-10-23 | 2026-10-28 |
| CVE-2026-93633 json | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to pu... | Not Provided | 2026-10-23 | 2026-10-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.9 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.8 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.7 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.6 | |||
| Application | Zimbra | Zimbra Collaboration Suite | 8.8.6 |